Cribl 对数据源进行过滤-01

先说一个项目中实际的例子:

Cribl 利用filter expression 来过滤 data,  举个例子： source1: sourcerouter='A', source 2: sourcerouter='B', 这个时候，可以要把他们合并起来: sourcerouter='A' || sourcerouter='B' 来进行过滤想要的数据。

最后可以使用一个pipeline 来对数据进行处理。

今天聊的是用regular express filter:

There are fundamentally two types of expressions in Stream:

1. Filter Expressions – These are used to decide what events to act upon in a Route or Function.
2. Value Expressions – These are used to create or modify data. They're generally used in Functions within a